Biz Security Level
Basic
Firewall, Spam Filter, Backup (AV if not Windows)
Mid
Patch Mgt, Web Filter, Monitoring, Password managers, MFA on email + Cloud, Users are not local Admin
Bronze
EDR, VPN, Scheduled Vulnerability Scanning, Physical Security review
Silver
Training, Phishing, Quick Vulnerabilty Test, Network Segmentation, MFA everywhere
Gold
Supply Chain Resiliancy Review, OSInt review, HDD encryption on Laptops
Platinum
Darkweb monitoring, HDD encryption on all, DLP, Compliance, Change Mgt, Defense in Depth, Mobile MDR, Pen testing, UBA